Open problems: Leakage models for language-based isolation.
As with most work on Spectre foundations, we focus on cryptography and
software-based isolation. Spectre, though, can be used to break most other software
abstractions as well—from module systems [1]} and object capabilities [2]}
to language-based isolation techniques like information flow control [3]}.
How do we adopt these abstractions in the presence of speculative execution?
What formal security property should we prove?
And what leakage model should be used?
